OPNsense pros and cons

We have been operating here in our lab for several months, and everything appears to be extremely stable.

The IDS and IPS features are valuable. From the usability perspective, there is a lot of good documentation. As IT professionals, we found it very easy to configure the firewall. It was easy to configure and use.

The solution has high availability.

What I like best about OPNsense is that, as a firewall, it's pretty good. I'm quite impressed with it. I had an excellent experience with OPNsense, which helped me achieve the targets I wanted.

URL blocking, Wireguard, Tail Scale, Engine Blocker, and VPN are the most valuable features for me.

The initial implementation process is simple.

OPNsense is easy to scale when running on the hardware.

It has an open license. It works very well, and there is an update every month.

It's more secure and more reliable.

The most valuable features of OPNsense are the GUI and frequent updates.

I think the most important thing is that it should be easily accessible, but currently, that doesn't seem to be the case. We need a hardware platform that's based on common standards and open computing principles, which would be like a commodity and benefit us greatly.

We did not like the fact that you have to configure everything with the graphic user interface. We have used other firewalls, such as FortiGate, that you can configure via code. OPNsense is not easy to integrate. When you are deploying via GitHub or another source repository, this is not possible. That's one thing we didn't like much.

The reporting part could be better.

An area for improvement in OPNsense is the hardware, which needs to be updated more frequently. DNS blocking is another good feature I want to be added to the solution. pfSense has a peer-blocking feature that I also want to see in OPNsense.

There is room for improvement in SSL inspection.

While they do have paid options that actually gives better features, for most of the clients, if they tend to take a paid option will instead opt for Fortinet.

The interface needs to be simplified. It is not user-friendly.

Its interface should be a little bit better.

The IPS solution could be more reliable.

When using the solution at the beginning was difficult. There was a steep learning curve.